---
typeId: req
recordId: benac-agt-002
fields:
  title: Agent identity and authentication
  statement: Agents shall be representable as principals or locally scoped
    authenticated sessions. Benac shall bind agent-authored packages, trust
    requests, capability requests, storage lease requests, compute lease requests, and
    invocations to the authenticated agent identity or session where attribution
    matters.
  rationale: Agents must be accountable without being allowed to authorize themselves.
  verification: Have an authenticated agent and an unauthenticated agent attempt
    the same authority-sensitive operation and verify correct attribution and
    denial behavior.
  testable: true
  status: draft
  area: BENAC-AGT
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.14 Machine-readable client operation
  order: 154
---
